Securing Tableau Workbooks

However, Xpress Insight also provides an access control model where a scenario can be read-only or shared with other users. This access control is honored through obfuscation (one user would need to guess the scenario id of another users' private scenario to view) in the standard workbook configuration, which is typically adequate for single-tenant environments where the access model is governing workflow and organization of scenarios between trusted team members rather than security.

However for shared systems and systems exposed to the internet in a hosted deployment, an additional level of access control is available. The details in the next section cover how to explicitly enforce the access control model, should a stricter policy be desired.